Grouper Users - Open Discussion List

[Shilen Patel <>]

It's deprecated but should still work.  If it failed due to a subject not found exception, then do you want those 4 entries in that OU to be subjects in Grouper?  If so, then your sources.xml file has to be configured to find them.  Have you configured the ldap source in there?  Or do you have your subjects in some other source as well (e.g. database)?

Thanks!

- Shilen

From: Jeffrey J Ramsay <>
Date: Friday, November 4, 2016 at 8:11 AM
To: Shilen Patel <>
Cc: "" <>
Subject: Re: [grouper-users] Subject is unresolvable

Shilen,

The "uid=grouper" is the ldap proxy account used by the Grouper application for authentication. The entire ldap source only contains four records. I tried to use the findById which failed and that command appears to have been deprecated.

http://www.internet2.edu/grouper/release/1.5.0/doc/api/edu/internet2/middleware/grouper/SubjectFinder.html

I did run the following and we don't have a lot defined.

gsh 0% grouperSession = GrouperSession.startRootSession();

edu.internet2.middleware.grouper.GrouperSession: 5e90eb19e1af45f69f7d38a4929d5f72,'GrouperSystem','application'

gsh 1% SubjectFinder.findAll("grouper")

subject: id='5ac5698d2a8f4c6c86e5095d208394e8' type='group' source='g:gsa' name='etc:sysadmingroup' 

subject: id='9d25e467-b127-4229-880b-ba65d0506c02' type='group' source='g:gsa' name='etc:wheel' 

subject: id='ad9bda57183e424b97847744fee10d33' type='group' source='g:gsa' name='etc:attribute:messages:grouperMessageRole' 

subject: id='b32891551b8e49d88487d380814ec47f' type='group' source='g:gsa' name='etc:grouperUi:grouperUiUserData' 

subject: id='4c320cff994d49dfb9ebd4dfa993f346' type='group' source='g:gsa' name='etc:webServiceClientUsers' 

subject: id='GrouperAll' type='application' source='g:isa' name='EveryEntity' 

My goal here is 1) to try and get a better understanding of the application and 2) just create a group will all users.

Thanks,

-Jeff

On Fri, Nov 4, 2016 at 7:26 AM, Shilen Patel <> wrote:

Hi,

You have an entry in your ldap under ou=users with uid=grouper?   If so, what does the following give you?

gsh 0% GrouperSession.startRootSession()

gsh 1% SubjectFinder.findById("grouper")

If that gives you a subject not found exception, and you really intend for "grouper" to be a subject, then your sources.xml configuration probably needs tweaking.

Thanks!

- Shilen

From: Jeffrey J Ramsay <>
Date: Thursday, November 3, 2016 at 11:57 PM
To: "" <>
Subject: [grouper-users] Subject is unresolvable

Hello -

I'm new to Grouper and I'm try to build my first group which will include all ldap users.

The search is running and returning the results as expected, but I'm not sure how to resolve the "Subject is unresolvable" message and could really use some help.

Subject is unresolvable 'grouper' col: subjectId, jobName: bu:ITS:myLdapGroup

loader ran successfully, inserted 0 memberships, deleted 0 memberships, total membership count: 4, unresolvable subjects: 4

Group setup based on examples ...

grouperSession = GrouperSession.startRootSession();

group = new GroupSave(grouperSession).assignName("bu:ITS:myLdapGroup").assignCreateParentStemsIfNotExist(true).save();

attributeAssign = group.getAttributeDelegate().assignAttribute(LoaderLdapUtils.grouperLoaderLdapAttributeDefName()).getAttributeAssign();

attributeAssign = group.getAttributeDelegate().retrieveAssignment(null, LoaderLdapUtils.grouperLoaderLdapAttributeDefName(), false, true);

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapTypeName(), "LDAP_SIMPLE");

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapFilterName(), "(uid=*)");

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSearchDnName(), "ou=users");

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapServerIdName(), "personLdap");

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapSubjectAttributeName(), "uid");

attributeAssign.getAttributeValueDelegate().assignValue(LoaderLdapUtils.grouperLoaderLdapQuartzCronName(), "0 * * * * ?");

group = GroupFinder.findByName(grouperSession, "bu:ITS:myLdapGroup");

grouperSession = GrouperSession.startRootSession();

group = GroupFinder.findByName(grouperSession, "bu:ITS:myLdapGroup")

loaderRunOneJob(group);

Any help or suggestions would be appreciated.

Thanks,

-Jeff

--

Jeffrey Ramsay
Assistant Director
Enterprise Software Infrastructure
and Technical Planning
Binghamton University
http://www.binghamton.edu

--

Jeffrey Ramsay
Assistant Director
Enterprise Software Infrastructure
and Technical Planning
Binghamton University
http://www.binghamton.edu